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Abstract 

We present a general theorem for the efficient verification of the lower bound of single-photon 
transmittance. We show how to do decoy-state quantum key distribution efficiently with large 
random errors in the intensity control. In our protocol, the linear terms of fiuctuation disappear 
and only the quadratic terms take effect. We then show the unconditional security of decoy-state 
method with whatever error pattern in intensities of decoy pulses and signal pulses provided that 
the intensity of each decoy pulse is less than /i and the intensity of each signal pulse is larger than 
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Introduction. — The decoy-state method[l|, [2I, Q, S] or some other methods 
can be used for two remote parties, Aice and Bob to do secure quantum key distribution 
(QKD)j^, Q, 11] Even Ahce only uses an imperfect source, e.g., a coherent hght [l2 . [isl. 1^ . 
A secure final key can be distilled by using the separate theoretical results 15|] if one knows 
the upper bound of the fraction of tagged bits (those raw bits generated by multi-photon 
pulses from Alice) or equivalently, the lower bound of the fraction of un-tagged bits (those 
raw bits generated by single-photon pulses from Alice). The goal of decoy-state method is 
to verify such bounds faithfully and efficiently. 



Recently, a number of experiments on decoy-state QKD have been done [16|,| [17|,|18|]. However, 
the existing theory of decoy-state method assumes the exact control of pulse intensities. A 
new problem arose in practice is how to carry out the decoy-state method efficiently given 
the inexact control of pulse intensity. In this Letter, we study this problem and we find 
that if the intensity of each pulses are bounded in a reasonable range, we can still verify the 
fraction of single-photon counts efficiently. 

General idea. — There are two goals here, security and efficiency. For security, the verified 
value of fraction of single-photon counts from our method must never larger than the true 
value given whatever channel. For this part we should not assume any specific property 
for the channel. This section will give a general method for secure verification of fraction 
of un-tagged bits. We also want our protocol to be efficient. We want that, in the normal 
situation where there is no Eve, the verified value of the fraction of single-photon counts is 
rather close to the true value. We shall evaluate the efficiency of our protocol in another 
section. 

We start from the definition of the counting rate of certain pulses. Given a class of 
independent pulses, after Alice transmits them to Bob one by one, if Bob observes n counts 
at his side, the counting rate for pulses in this class is s = n/N. If the state of source 
in photon-number space is known, the fraction of single-photon counts is known given the 
counting rate of all those single-photon pulses. We shall only consider how to find the single- 
photon pulse counting rate hereafter. Suppose there are / different subclasses of independent 
light pulses in a certain class. We denote the fractions of pulses in each subclasses by 
ao, fli ■ ■ ■ , o;. If all these pulses are sent to Bob through whatever channel, the total counts 
observed by Bob should be equal to the summation of the counts due to the pulses of each 
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subclasses. Therefore we have 

I 



S = '^aiSi (1) 





S is the counting rate of the whole class while is the counting rate of the ith class. 

The decoy-state method itself does not require the Possonian distribution of source hght, 
though it has been applied to the case of Possonian distribution 

mm 

. Most generally, 

in a 3- intensity decoy-state protocol, we consider 3 classes of states, Yq, Y, Y'. Yq contains all 
vacuum pulses. Y contains three subclasses yo, yi,yc for vacuum pulses, single-photon pulses 
and multi-photon pulses, respectively. Classes Y' contains 4 subclasses, yQ, y[, y'^, y'^. We 
shall use notations Sq, S, S' for counting rates of classes of Yq, Y, Y', respectively; notations 
{sx}, {s'^} for counting rates of subclasses {yx}, {y'x} and x can be 0,1, c,d. Using eq.([I]) we 
have 

S = aoSo + aiSi + a^s^ 

S' = a[)S[) + a[s[ + a'X + a'd^'d 

We shall regard Sq, S, S' as known parameters since they are observed directly in the protocol. 
In general, ^ s'^. Since all of them are non- negative, we can assume 

s'l = (1 - ri)si, s'^ = uJcSc (3) 
and (1 — ri),LJc are non-negative numbers. If we define b[ = ujca[, eqs.(l2]) is equivalent to 

E = aiSi + acSc 

(4) 

E' = a[si + b'^Sc 

and E = S — OoSq; E' = S' — 6qSq + /i — a'^s'^ and /i = ria[si. Therefore, it will be secure 
if we find the smallest value Si satisfying the equation above among all possible values for 
parameters E,E',ai,ac,a[,b'^. In general, this can be done numerically. To seek the lower 
bound of Si based on eqs.(jl]), we need first find the ranges of all parameters. As we are 
going to show, the parameters of {a^,a^} can be determined rather precisely by a type of 
tomography. In our protocol, we mix all pulses from 3 classes randomly and we can simply 
deduce Uc, fi by classical random samphng theory. In a decoy-state method, we let subclass 
yoiy'o) , Viiy'i) contains all those vacuum pulses, single-photon pulses from class Y{Y'), yc 
contains all those multi-photon photon pulses from Y. Suppose the state of multi-photon 
pulses from Y are pc and state of class Y' is a convex form of pc and other states. We 
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require the state of a pulse from y'^ be also pc, same to that of Uc- We emphasize that in the 
protocol Alice does not need to know which pulse belongs to which subclass, we only need 
that mathematically there exists such sub classes [2I. 

For certain two subclasses, if each pulses are independent and the states for pulses of 
two subclasses are same, the pulses of one class can be regarded as samples of all pulses 
of both classes, if all pulses are randomly mixed. Therefore, if each pulses of classes Y, Y' 
are independent and randomly mixed, the counting rates for pulses of subclasses 
{?/c,l/c}) {l/0)^o} and {yg,Fo} can only be different by a statistical fluctuation. Therefore, 
bounds of sq, Sq are known and parameters of n, cUc can be formulated by si,Sc and the 
number of pulses from classical sampling theory 2(] . If there are a larger number of pulses, 
counting rates of the same state from different classes should be almost the same. For the 
case of using exact intensities of 0,yU, /i', the parameters of {ax} and {a^} are known from 
the information of the source state. For example, given coherent light of intensity 0, /x, ^' 
for classes Yq? Y' , respectively, we haveP 



ao = Aq = e ^]ai = Ai = /xe" 



= A, = 1 - e-^ - ^^e-^' . ^ 

(oj 

a'^ = A'^ = e"^', a; = A[ = fi'e-i"' 

A theorem for calculation o/si . — Most directly, given the ranges of each parameters involved 
in our protocol, we can solve Eqs.(jl]) numerically for the lower bound of single-photon counts. 
However, since here there are a number of parameters, the numerical complexity can be huge. 
We can avoid the complexity by the following treatment. Define Ki = Kc = Ki = 
K'^= j^. We can always find a meaningful solution for si, Sc if 

K[>Ki> 0, K,>K'^> 0. (6) 

As it is shown in Fig.([T]), the solution of si, Sc is the crossing point of the two lines in Sc — si 
plane. In this plane, it is easy to see that Si value rises if K[ or K'^ decreases, or if Ki or 
Kc rises. Therefore, the largest possible values of K[, K'^ and the smallest possible values of 
Ki, Kc will produce the lower bound of si. We have the following theorem: Theorem 1: 
Given eqs.(jl]), if eqs.([6]) holds, the maximum of values of /i and minimum values 

of OqSq, a[, b'^, a'^ will give the smallest result of Si in eqs.(jl]). An alternative proof is shown 



FIG. 1: Graphics of eqs.([l|) in si — Sc plane. Obviously, si value will be raised if Ki or Kc is raised, 
or if K[ or K'^ is decreased. This leads to our theorem 1. 

in the appendix. 

Decoy-state QKD with simple tomography. — We assume that the intensity fluctuation of 
each individual pulse is random. Consider a protocol where Alice controls the intensity by a 
feedback circuit. Each time she first produces a father pulse Fi whose intensity is not known 
exactly. This pulse is then split into two daughter pulses: Di and Qi. The intensity of pulse 
Di is detected (e.g., by homodyne measurement) and this detection outcome determines the 
instantaneous attenuation to Qi to obtain the supposed intensity. There could be random 
errors in detecting D^, in instantaneously controlling the attenuator. (The feedback circuit 
is not drawn in Fig. ([21) ). 

Whenever Alice wants to use /i or fi', she actually uses 

lii = {l + 5,)fi; fi[= + (7) 

She does not know each specific value of 6i or 5-. But as we shall show she can know the 
averaged value of 

1 ^ _ 1 ^' 

1 1 

rather exactly. Here N, N' are number pulses in class Y, Y', respectively. Moreover, given 
the fact 

TV TV' 

J2^^ = J2^[ = (9) 



Alice can find rather narrow ranges for relevant parameters of her states by a type of simple 
tomography. She can, as shown in Fig. ([2]) , every time first produces a pulse of intensity 




FIG. 2: Our proposed set-up for decoy-state QKD. D: detector, A: attenuator, BS: 50:50 beam- 
splitter. The transmitted light is sent to Bob and the reflected light is detected by Alice. 

2/ij or 2/i- by attenuation. The pulse is then split by a 50:50 beam-splitter. The trans- 
mitted mode is sent to Bob, the reflected mode goes to a low efficient photon detector, 
e.g., a detection efficiency of ^ < 10%. We shall simply use the mathematical model of an 
attenuator with transmittance ^ and a perfect yes/no detector. Suppose she has observed 
the clicking rate oi h + (Iq and h' + do for those N reflected pulses of intensity {/ij} and A^' 
reflected pulses of intensity {/x^}, respectively. Here do is the dark count rate of her detector. 
Mathematically, 

N 

J](l - e-^^^)/N = h (10) 



This leads to the following facts after Taylor expansions: 

/i > h/^; (11) 



fi<^^= ' "^^'i+y""^^ - + h\l + 0/(20 (12) 
and notation C = T^Sf/N < 6"^, 6 = Max{\6i\}. Combine EqsdHini) and the Taylor 
expansion of Eq. (fTOj) we obtain an even more tightened lower bound formula 

= /i/e + /iV(20 - eV+/3! (13) 

Replacing h with h' in Eqs. ( |T2|T3l) we can also bound /i' by yu'„ < /2' < yu'^. Similarly, we 
shall use 

C = E-^f/^' < ^' = Max{6i}. Later, she can verify the bounds of all 

parameters with the observed values h, h' and the above formulas for ft, ft'. The true state 
for a pulse in class Y is 

i,n=0 



and ao, ai, are e~^^/N, J2i = 1 — Oq — ai. Here pc is the averaged state of all 

multi-photon pulses in class Y . Obviously, if Ji' is sufficiently large than Ji and the intensity 
error is not too large, we can also write p^/ in a convex form including p^- 



and a^, < are e'^ViV', P^e-'^ViV', < = |^f|g^a„ a', > 0, 
We have the following bound values those parameters involved 

e-^+ <ao <e~^-(l + pV/2) 
(1 - p_52)^_g-M- < ai < p+e~''+ 
ttc < 1 - e"^+ - p+e''+ + 



(15) 

is a density operator. 



(16) 



a'l > (1 - /i'_5'')p'_e 



6' > OJ, 



M'_^[l-e- 



-fi—e 



(17) 



(l+52)M2e''--''+ 



Efficiency evaluation. — We shall compare the efficiencies of two protocols, the ideal protocol 
where the intensity of every light pulse in class Y or Y' is exactly p or p' and our protocol 
where the intensity of each light pulses is inexactly controlled. In a real experiment using 
our protocol, Alice simply reads h, h' values and then calculate the lower bound of Si. Here 
we assume the model that Alice has observed 



(18) 



Given these, we can calculate bounds for p, p' by our earlier equations. We take the 
following assumptions: p = 0.2, fi' = 0.6, ^ = 5% for Alice's detection efficiency, linear 



channel with transmittance 1] 
protocols we use /i < lOai, 



lo-^ So 



So 



andcUr > 1 — 10 



0, = 10^ and 6 = 6'. In both 
- . To compare the efficiencies 



of our protocol and the ideal protocol, we only need to compare solutions of eqs.(!4l) for two 
protocols. We now denote Si,Si to be the results of single-photon transmittance from our 
protocol and the ideal protocol, respectively. The fraction of un-tagged bits from class Y' is 
given by 



A; = SiA;/(i -e-^'') 



(19) 



TABLE I: Efficiency comparison of our protocol and an ideal protocol. 



6 


5% 


10% 


15% 


20% 


25% 


30% 


35% 


T 


99.8% 


99.6% 


99.2% 


98.7% 


98.0% 


97.2% 


96.3% 


R 


99.7% 


99.0% 


97.9% 


96.3% 


94.4% 


91.9% 


89.2% 



A'^ is for our protocol, A'^ is for the ideal protocol. We shall calculate T = si/si, R = A[/ A[. 
We find very good results given various 6 values. (See details in table 1.) Moreover, the 
results our protocol can be even improved because there are obviously better ways to bound 
C, C' more tightly. For example, suppose we know that the fluctuation of more than 90% of 
the pulses is less than 10%, even though the largest fluctuation is 50%, we have ( < 3.4% 
and we can verify a. R > 96% with 5^ being replaced by C in all equations. For another 
example, Alice can use two detectors of efficiency .^1,^2 to tightly verify the upper bound of 
(: Every time she first produces a pulse of intensity 3x, (x can be 0, around fi or /i'). She 
equally divides the pulse into 3 modes, mode b ia sent to Bob, modes 1 and 2 are sent to 
detector 1 and 2 respectively. Using the number of counts of each detector, she can verify 
an upper bound of ( value only a little bit larger than the true value of (. (This will be 
reported elsewhere separately.) 

Our theorem 1 is based on the conditions of eqs.(l6]). These conditions are related to 
the statistical fluctuations which are dependent on the value of si,Sc. But we can verify 
these conditions before knowing the exact values of Si,Sc- First, we assume Sc > ^rj. This 
assumption leads to Si < 77. Here rj is the channel transmittance. We can assume so safely. 
If the assumption Sc > 21] is incorrect, then si > r] which is a quite good result. If the 
assumption of Sc > 2r] is correct, then our calculation based on this is alright. In whatever 
case, it is secure if we use the assumption for calculation and we then use Min{ri, si} (si is 
the calculated result.) Therefore we can have bound values of 

Given these, we can easily verify eqs.([n]) and then use our theorem 1 safely. 
Effect of inexact vacuum pulses in class Yq. — In general, 5*0 7^ 0. We can safely set Sg = 
according to our theorem 1 and we only need to consider the upper bound of Sq- Asymp- 
totically, we can simply replace sq by So even though pulses in Yq are not strictly vacuum. 



8 



Let's assume the actual state in Yo is po = {I — eo)|0)(0| + ei|l)(l| + emPm- Here pm is a 
state of multi-photon pulses, = 0(ef), ei << 1 and cq = ei + em- Therefore, we have 

5*0 = (1 - eo)so + eiSi + e^Sm- (21) 

This leads to a preliminary upper bound of sq < We then replace sq in eqs.(jl]) and 

solve the equation for lower bound of Si. We assume Si > 1.5So at this stage, otherwise 
the protocol should be discarded. Now we consider eq. (!2T]) again. We have a new bound of 

So < - eisi < So. 

The unconditional security for whatever error pattern. — Suppose we don't use the feedback 
control for f2j in Fig. ([2]). Most generally, the intensity fluctuation of each pulses is not 
perfectly random. Now the probability for a pulse from or from y'^ can change slightly 
at different time intervals therefore Sx can be slightly different from s'^ in the whole time 
series even there is no statistical fluctuation. For example, it is possible that in a certain 
time interval, the probability of using yi {y[) is less (larger) than the averaged probability 
of using yi {y[), Eve can produce a certain time-dependent channel transmittance for those 
single-photon pulses sent from Alice and the averaged counting rates of yi and y[ in the 
whole time series can be different from each other, even there is no statistical fluctuation. 
This is to say, in general, pulses of sub-class yx and y'^ in principle can not be regarded 
as randomly mixed if the intensities of each pulses are not exactly controlled. We need a 
separate security proof for a protocol with whatever pattern of intensity error. We now prove 
that the protocol is secure if Pi < p and p'^ > p' . 

We start from a virtual protocol. Protocol 1: At each time i in sending a pulse to Bob, 
Alice produces a bipartite state 

Pi{2) =poko)(-2o| ® |0)(0| +p\zi){zi\® p^+p'\z2){z2\® p^,'^ (22) 

and announces the value of p[. Here px = ^~^r~\^) ^^1' value p keeps to be constant 

but p[ can change from time to time and p[ is not less than a constant value p'. States {l^;^)} 
are orthogonal to each other for different x {x = 0, 1, 2) and po + p + p' = 1. Alice keeps 
the light pulse in the first subspace and sends out the pulse in the second subspace of the 
bipartite state to Bob, i runs from 1 to Nt, the number of total pulses sent to Bob. Later, 
Alice measures her states ({l-^a;)}) and she can know which pulse in the second subspace of the 
bipartite state belongs to which class {Yq, Y or Y'). As we have shown in Eqs.([5]), state can 
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be written in the convex form of = y4o|0)(0| {l\ + AcPc and AcPc = — 1^) (^1- 

Since /x^ > p', we always have the following convex form for state p^^ 

p,, = A[\1){1\ + A'^p, + (1 - A\ - A'^)f^^ (23) 

where A'^ = p'e~^', A'^ = ^^^j^rp^- Obviously, the specific formula for p* exists but it is 
unimportant here since we only need the fact that p* is a density operator[2|. To anybody 
outside Ahce's lab, Alice could have used a tripartite state of 

a(3) =Poko)(2;o| ® ® |0)(0| 

+P\zi){zi\(^{Aq\vq){Vq\ ® Ai\vi){vi\ ® A,\Vc){Vc\® Pc) 

+p'\z^){z2\ ® [A\\v[){v[\ ® |1)(1| + ®p; + (1 - - ®p;] (24) 

and those states in the second subspace are all orthogonal to each other. Alice keeps the 
pulses in the first and second subspaces and sends out the pulse in the third subspace to Bob. 
Given this, we can define 3 classes Yq, Y, Y' of pulses: if Alice obtained her measurement 
outcome of l^o), ki) or |z2) in the first subspace, the corresponding pulse sent out is regarded 
as a pulse of class Yq,Y or Y'. We can also define 3 subclasses yo,yi,yc of Y and 3 sub- 
classes y'l^y'c.y'e of Y'-. if Alice obtains her measurement outcome of |wo), I'^i) or in the 
second subspace, the corresponding pulse sent out is regarded as a pulse of sub-class yo.yi 
or yc] if Alice obtains her measurement outcome of \v[), \v'^ or \v'^) in the second subspace, 
the corresponding pulse sent out is regarded as a pulse of sub-classes y'l.y'^ or y'^. Here y[ 
is a bit different from the sub-class y'^ defined before: y'^ defined before contains all those 
single-photon pulses of Y' while y'l here possibly does not contain all single-photon pulses 
in Y' if p[ < p', since some of single-photon pulses from Y' are regarded as elements of y'^ 
now, according to our definition. Similarly, y'^ here is also a bit different from y'^ as defined 
before. Since pulses of sub-classes y[,y'f, occur with constant probabilities, pulses from sub- 
class yi,y'i, pulses from ydjc and pulses from yo,YQ are randomly mixed. For simplicity 
in presentation, we only consider the asymptotic case here, i.e., the counting rates for two 
sub-classes containing the same state must be equal to each other. We can use the following 
constraints to verify the single-photon transmittance Si. 

AiSi + AeS, = E 

A[si + A'^s, < S' 
10 
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and E = S—e~^so, S, S' are the counting rates of classes Y, Y', si is the counting rate of class 
Hi or y[, Sc is the counting rate of class yc or y'^, Ai = fie~^, Ac = I — Aq — Ai. The value sq 
can be deduced from the observed counting rate of class Yq by classical sampling theory. In 
obtaining the second constraint above, we have used the fact that Ntp'{A[si+A'^Sc) < Ntp'S', 
i.e., the number of counts caused by part of pulses {y[ Uy^) of class Y' cannot be larger than 
the number of counts caused by all pulses of class Y'. Here, in using Eqs. (!25|) . Alice actually 
does not need any information of which pulse belong to which sub-class. Therefore she can 
discard the pulse in the second subspace of the tripartite state pj(3), consequently, she can 
just use the bipartite state Pi(2) and obtain si value through Eqs.( l25|) . In this protocol, 
Alice announces /i^ value at each time but it is still secure since her announcement does 
not change the fact that pulses of each sub-classes yo,yi,yc,y[,yc will occur with constant 
probabilities therefore classical randomly sampling theory works, so that Eqs. fl25l) holds. 
(Definitely, the protocol is also secure if Alice does not announce /i^ value at each time.) 

Suppose in another protocol. Protocol 2, Alice uses source state 7^ which can in principle 
be obtained through attenuating Pi{2) in the second subspace by a factor Xi- If Eve can 
attack this protocol effectively with scheme A then Eve can also attack Protocol 1 effectively 
by first attenuating the pulses by a time-dependent factor Xi ^-nd then using scheme A. Given 
this fact, we conclude that any source can be used securely if that source can in principle be 
obtained through attenuating state Pi(2) in the second subspace. This gives rise to Lemma 
1: Alice can use Eqs. (j25l) safely if the source she has actually used in principle can be 
produced by attenuating Pi(2) in the second subspace. This leads to Lemma 2: Alice can 
safely use Eqs.f l25p for lower bound value of si if she actually at each time had used any 
state Wi = Po\zo){zo\ ® |0)0| +p\zi){zi\ (g) p,^. + p'\z2) {z2\ Pu'- provided that Ui < p and 
^'i > p' ■ Proof: We denote the (time-dependent) attenuation factor uji = ^. In protocol 1, 
we can set p[ = ^ for the bipartite state Pi(2) and the protocol with such a setting is secure 
since > i'[> p' ■ After attenuating Pi(2) by the factor uji in the second subspace, Pi(2) is 
changed to state Wi. According to our lemma 1, Alice can use Wi directly and uses Eqs.(|25ll 
for lower bound of si. Moreover, it is of no difference if Alice measures her states {l^^x)} 
in the very beginning. If she does this, the protocol with source state Wi is changed into a 
3-intensity protocol with intensities 0, {i^i}, {u'i} and Ui < p, u'- > p', with probability po;P)P' 
for using each of them at each time. Consequently we arrive at Theorem 2: The 3-intensity 
protocol is secure with whatever error pattern for intensities of decoy pulses (class Y) and 
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signal pulses (class Y') provided that 1) the intensity of each decoy pulses is less than ^ and 
the intensity of each signal pulses is larger than /x'; 2) we use Eqs.f l25|) to calculate si. Our 
result here can obviously be extended to the non-asymptotic case. To do so, we only need 
to 1) replace Si, Sc by s'^, s'^ in the second constraint of Eqs. fl25p : 2) give the possible ranges 
for difference between si and s'^ and difference between Sc, s'^ with exponential certainty by 
classical random sampling theory [2I; 3) solve Eqs. (l25|) numerically in the ranges and find 
the smallest si. 

Although the method shown above is unconditionally secure, in the efficiency criterion, 
we can have a better choice, e.g., we use . However, there 

we request using the same father pulse and exact control of attenuation. Here in EqsJ2^ we 
don't need these and it is unconditionally secure. The result here can apply to all existing 
experiments immediately, i.e., we only need to redo the calculation of si using our method 
and the existing experimental data but we don't have to redo the experiment itself. 

In summary, we have shown that decoy-state method QKD is secure and efficient even 
there are errors in the intensity control. 
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APPENDIX I 

Suppose Si, Sc are solution of Eq.(j4]). Then 5*1 must satisfy 

- (26) 

Consider another set of parameters {a^ < ax,o,'^ > (^'x}^K — fi ^ fi^so < so,Sq > s'q. 
We define E' = S' — ci'qs'q + f\ < E' , E = S — doSo > E. We suppose si, Sc are solution for 
eqs.(j4]) with those tilde parameters. Therefore Si should satisfy 

b'E - dcE' b'E - d^E' 
= ^ -i— > -JL, i_ (27) 

dib'^ — a'lttc ai^c — a[ac 
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Since b[ > b'^, ac < we can assume 6^ = (1 + Ai)6c, = + ^2)0'c and Ai, A2 > 0. Also 
we denote y = 7 = and we have 

!>i>^A^ + —i ^=1-) (281 

= S,(1 + 

While we know that ^ = ^ ^'"/(''"^^/j = ^ > eqs. fl28l) is changed to si > Si. This completes 
the proof of our theorem. 



APPENDIX II 

In this appendix we derive the inequalities of fll6|17l) . First, = -^^2^^^' — 
j^e~^ X] After the Taylor expansion, we have 

5^6-'^^' = 5^(1-^5. + ^ -■■■). (29) 
Using the fact ^ 5j = and 5 = Max{\6i\}, we obtain 

e"^ < ao < e'f'il + 1x^5^/2). (30) 
Further, the fact that fi- < < fi+ leads to 

e-^+ < ao < e-^~ (1 + ^^6^2). (31) 

This is the first inequality in Eq. ffT6|) . We have the following equivalent form for oi = 

This means 

/le-^(l - fiS^) <ai< Jie-'^ (33) 

which gives rise to 

/x_e-^- (1 - /i_52) < ai < /i+e-^+, (34) 

the second inequality of Eq. f|T6|) . Next we consider = \ — aQ — ai = 1 — ^ ^(e~^' +/iie~'''). 
The As a result of Taylor expansion 

ai = l-e-^(l+/x-^ + ---) (35) 
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which leads to 

l-e-f"- fie-~^ < < 1 - e"^ - fie-'^ + e" V<^V2. 
Given the bounds of of /2, we have 

The derivations of the first two inequahties in Eg. (1171) are same with that of Eq. f|T6|) . 
only show the third one here. To obtain the lower bound, we have 

Y.^^fe-^'^/N " (1 + 52)^2g-M- 

Therefore we have 

- /i2(l + 52) - (l + <52)^^eM'_-M+ ■ 
Given that b[ = ujca'^, we arrive at the third inequality of Eq. f[T7|) . 
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